CVE-2024-23347

2024-01-1617:57:20

facebook

www.cve.org

cve-2024-23347

meta spark studio

package.json

arbitrary code

application

EPSS

0.001

Percentile

23.1%

JSON

Prior to v176, when opening a new project Meta Spark Studio would execute scripts defined inside of a package.json file included as part of that project. Those scripts would have the ability to execute arbitrary code on the system as the application.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Meta Spark Studio",
    "vendor": "Meta Platforms, Inc",
    "versions": [
      {
        "lessThan": "176",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

References

www.facebook.com/security/advisories/cve-2024-23347

EPSS

0.001

Percentile

23.1%

JSON

Related for CVELIST:CVE-2024-23347